Cyber Risks · Cisco Talos

Do robots dream of secure networking? Teaching cybersecurity to AI systems

Summary: Cisco Talos published a proof-of-concept showing an AI agent built with LangChain and OpenAI's GPT-3.5-Turbo checking domain safety in real time through the Cisco Umbrella API before deciding whether to connect. In the demo, the agent called www.cisco.com safe, returned "do not connect" for a known malicious domain, gave separate verdicts for a positive and an unknown domain in the same input, and answered "no opinion" when no domains were present.

What's compelling: The agent's judgment rests entirely on the threat intelligence feed behind it, so a domain with an unknown disposition comes back as uncertain rather than blocked. Talos notes that placing the agent behind a web gateway or forcing Umbrella DNS would enforce the restriction, but would remove the agent's ability to weigh conflicting information and decide for itself.

Read the original at Cisco Talos ↗

Topics
Malware
Related